Android PHP Login

<?php
include 'db.php';
 
// json response array
$response = array("error" => FALSE);
 
if (isset($_POST['email']) && isset($_POST['password'])) {
 
    // receiving the post paramss
    $email = $MySQLi_CON->real_escape_string(trim($_POST['email']));
    $upassword = $MySQLi_CON->real_escape_string(trim($_POST['password']));
 
    // get the user by email 
    $query = $MySQLi_CON->query("SELECT  email, password FROM users WHERE email='$email'");
	$row=$query->fetch_array();
 
    if (password_verify($upassword, $row['password'])){
       
        echo json_encode($response);
    } else {
        // user is not found with the credentials
        $response["error"] = TRUE;
        $response["error_msg"] = "Login credentials are wrong. Please try again!";
        echo json_encode($response);
    }
} else {
    // required post params is missing
    $response["error"] = TRUE;
    $response["error_msg"] = "Required parameters email or password is missing!";
    echo json_encode($response);
}
	
	$MySQLi_CON->close();
	
}
?>